src/java.base/share/lib/security/default.policy
author apetcher
Tue, 24 Oct 2017 09:58:27 -0400
changeset 48580 d4898fde8171
parent 48130 998c88ae423a
child 48841 0937e5f799df
child 56089 42208b2f224e
permissions -rw-r--r--
8185292: Stricter key generation Reviewed-by: mullan
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     1
//
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     2
// Permissions required by modules stored in a run-time image and loaded
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     3
// by the platform class loader.
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     4
//
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     5
// NOTE that this file is not intended to be modified. If additional
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     6
// permissions need to be granted to the modules in this file, it is
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     7
// recommended that they be configured in a separate policy file or
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     8
// ${java.home}/conf/security/java.policy.
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     9
//
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    10
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    11
grant codeBase "jrt:/java.activation" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    12
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    13
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    14
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    15
grant codeBase "jrt:/java.compiler" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    16
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    17
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    18
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    19
grant codeBase "jrt:/java.corba" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    20
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    21
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    22
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    23
grant codeBase "jrt:/java.scripting" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    24
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    25
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    26
39885
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    27
grant codeBase "jrt:/java.security.jgss" {
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    28
    permission java.security.AllPermission;
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    29
};
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    30
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    31
grant codeBase "jrt:/java.smartcardio" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    32
    permission javax.smartcardio.CardPermission "*", "*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    33
    permission java.lang.RuntimePermission "loadLibrary.j2pcsc";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    34
    permission java.lang.RuntimePermission
41812
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    35
                   "accessClassInPackage.sun.security.jca";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    36
    permission java.lang.RuntimePermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    37
                   "accessClassInPackage.sun.security.util";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    38
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    39
                   "javax.smartcardio.TerminalFactory.DefaultType", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    40
    permission java.util.PropertyPermission "os.name", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    41
    permission java.util.PropertyPermission "os.arch", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    42
    permission java.util.PropertyPermission "sun.arch.data.model", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    43
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    44
                   "sun.security.smartcardio.library", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    45
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    46
                   "sun.security.smartcardio.t0GetResponse", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    47
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    48
                   "sun.security.smartcardio.t1GetResponse", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    49
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    50
                   "sun.security.smartcardio.t1StripLe", "read";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    51
    // needed for looking up native PC/SC library
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    52
    permission java.io.FilePermission "<<ALL FILES>>","read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    53
    permission java.security.SecurityPermission "putProviderProperty.SunPCSC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    54
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    55
                   "clearProviderProperties.SunPCSC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    56
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    57
                   "removeProviderProperty.SunPCSC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    58
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    59
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    60
grant codeBase "jrt:/java.sql" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    61
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    62
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    63
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    64
grant codeBase "jrt:/java.sql.rowset" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    65
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    66
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    67
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    68
grant codeBase "jrt:/java.xml.bind" {
45640
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
    69
    permission java.security.AllPermission;
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    70
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    71
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    72
grant codeBase "jrt:/java.xml.crypto" {
43206
4c18d1166944 8140353: Improve signature checking
mullan
parents: 42693
diff changeset
    73
    permission java.lang.RuntimePermission
4c18d1166944 8140353: Improve signature checking
mullan
parents: 42693
diff changeset
    74
                   "accessClassInPackage.sun.security.util";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    75
    permission java.util.PropertyPermission "*", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    76
    permission java.security.SecurityPermission "putProviderProperty.XMLDSig";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    77
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    78
                   "clearProviderProperties.XMLDSig";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    79
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    80
                   "removeProviderProperty.XMLDSig";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    81
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    82
                   "com.sun.org.apache.xml.internal.security.register";
40551
05eba5515cbb 8151893: Add security property to configure XML Signature secure validation mode
mullan
parents: 39885
diff changeset
    83
    permission java.security.SecurityPermission
05eba5515cbb 8151893: Add security property to configure XML Signature secure validation mode
mullan
parents: 39885
diff changeset
    84
                   "getProperty.jdk.xml.dsig.secureValidationPolicy";
43221
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    85
    permission java.lang.RuntimePermission
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    86
                   "accessClassInPackage.com.sun.org.apache.xml.internal.*";
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    87
    permission java.lang.RuntimePermission
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    88
                   "accessClassInPackage.com.sun.org.apache.xpath.internal";
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    89
    permission java.lang.RuntimePermission
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    90
                   "accessClassInPackage.com.sun.org.apache.xpath.internal.*";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    91
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    92
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    93
grant codeBase "jrt:/java.xml.ws" {
45640
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
    94
    permission java.security.AllPermission;
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
    95
};
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
    96
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
    97
grant codeBase "jrt:/jdk.accessibility" {
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
    98
    permission java.lang.RuntimePermission "accessClassInPackage.sun.awt";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    99
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   100
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   101
grant codeBase "jrt:/jdk.charsets" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   102
    permission java.util.PropertyPermission "os.name", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   103
    permission java.util.PropertyPermission "sun.nio.cs.map", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   104
    permission java.lang.RuntimePermission "charsetProvider";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   105
    permission java.lang.RuntimePermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   106
                   "accessClassInPackage.jdk.internal.misc";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   107
    permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   108
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   109
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   110
grant codeBase "jrt:/jdk.crypto.ec" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   111
    permission java.lang.RuntimePermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   112
                   "accessClassInPackage.sun.security.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   113
    permission java.lang.RuntimePermission "loadLibrary.sunec";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   114
    permission java.security.SecurityPermission "putProviderProperty.SunEC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   115
    permission java.security.SecurityPermission "clearProviderProperties.SunEC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   116
    permission java.security.SecurityPermission "removeProviderProperty.SunEC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   117
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   118
43248
5e15de85a1a0 8172527: Rename jdk.crypto.token to jdk.crypto.cryptoki
ascarpino
parents: 43245
diff changeset
   119
grant codeBase "jrt:/jdk.crypto.cryptoki" {
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   120
    permission java.lang.RuntimePermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   121
                   "accessClassInPackage.sun.security.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   122
    permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   123
    permission java.lang.RuntimePermission "loadLibrary.j2pkcs11";
41603
bb9d97b4c21b 8168313: Tighten permissions granted to jdk.crypto.pkcs11 module
mullan
parents: 41556
diff changeset
   124
    permission java.util.PropertyPermission "sun.security.pkcs11.allowSingleThreadedModules", "read";
bb9d97b4c21b 8168313: Tighten permissions granted to jdk.crypto.pkcs11 module
mullan
parents: 41556
diff changeset
   125
    permission java.util.PropertyPermission "os.name", "read";
bb9d97b4c21b 8168313: Tighten permissions granted to jdk.crypto.pkcs11 module
mullan
parents: 41556
diff changeset
   126
    permission java.util.PropertyPermission "os.arch", "read";
48580
d4898fde8171 8185292: Stricter key generation
apetcher
parents: 48130
diff changeset
   127
    permission java.util.PropertyPermission "jdk.crypto.KeyAgreement.legacyKDF", "read";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   128
    permission java.security.SecurityPermission "putProviderProperty.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   129
    permission java.security.SecurityPermission "clearProviderProperties.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   130
    permission java.security.SecurityPermission "removeProviderProperty.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   131
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   132
                   "getProperty.auth.login.defaultCallbackHandler";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   133
    permission java.security.SecurityPermission "authProvider.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   134
    // Needed for reading PKCS11 config file and NSS library check
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   135
    permission java.io.FilePermission "<<ALL FILES>>", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   136
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   137
45640
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   138
grant codeBase "jrt:/jdk.desktop" {
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   139
    permission java.lang.RuntimePermission "accessClassInPackage.com.sun.awt";
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   140
};
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   141
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   142
grant codeBase "jrt:/jdk.dynalink" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   143
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   144
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   145
47267
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   146
grant codeBase "jrt:/jdk.httpserver" {
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   147
    permission java.security.AllPermission;
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   148
};
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   149
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   150
grant codeBase "jrt:/jdk.internal.le" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   151
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   152
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   153
45640
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   154
grant codeBase "jrt:/jdk.internal.vm.compiler" {
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   155
    permission java.security.AllPermission;
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   156
};
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   157
47595
bb0c5c1a2785 8188775: Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.hotspot
kvn
parents: 47267
diff changeset
   158
grant codeBase "jrt:/jdk.internal.vm.compiler.management" {
48130
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   159
    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.hotspot";
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   160
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.vm.ci.runtime";
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   161
    permission java.lang.RuntimePermission "accessClassInPackage.sun.management.spi";
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   162
    permission java.lang.RuntimePermission "sun.management.spi.PlatformMBeanProvider.subclass";
47595
bb0c5c1a2785 8188775: Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.hotspot
kvn
parents: 47267
diff changeset
   163
};
bb0c5c1a2785 8188775: Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.hotspot
kvn
parents: 47267
diff changeset
   164
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   165
grant codeBase "jrt:/jdk.jsobject" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   166
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   167
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   168
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   169
grant codeBase "jrt:/jdk.localedata" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   170
    permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   171
    permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   172
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   173
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   174
grant codeBase "jrt:/jdk.naming.dns" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   175
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   176
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   177
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   178
grant codeBase "jrt:/jdk.scripting.nashorn" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   179
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   180
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   181
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   182
grant codeBase "jrt:/jdk.scripting.nashorn.shell" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   183
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   184
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   185
39885
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   186
grant codeBase "jrt:/jdk.security.auth" {
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   187
    permission java.security.AllPermission;
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   188
};
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   189
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   190
grant codeBase "jrt:/jdk.security.jgss" {
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   191
    permission java.security.AllPermission;
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   192
};
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   193
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   194
grant codeBase "jrt:/jdk.zipfs" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   195
    permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   196
    permission java.lang.RuntimePermission "fileSystemProvider";
41959
3b3918911a15 8168862: Tighten permissions granted to the jdk.zipfs module
sherman
parents: 41812
diff changeset
   197
    permission java.util.PropertyPermission "os.name", "read";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   198
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   199
43245
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   200
// permissions needed by applications using java.desktop module
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   201
grant {
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   202
    permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   203
    permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans.*";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   204
    permission java.lang.RuntimePermission "accessClassInPackage.com.sun.java.swing.plaf.*";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   205
    permission java.lang.RuntimePermission "accessClassInPackage.com.apple.*";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   206
};